Privacy, consent & DPDPA compliance
Elara-Cortex (Pty) Ltd · Johannesburg · Last updated 17 June 2026 ·
Terms of service ·
Privacy notice ·
Full legal
DPDPA 2023 (Digital Personal Data Protection Act): Data Fiduciary identity — Elara-Cortex (Pty) Ltd, Johannesburg.
Grievance Officer (India): privacy@elara-cortex.com. Notice in English and Hindi on
/india/hi. Purpose of processing, affirmative consent, consent withdrawal as easy as giving consent,
Data Principal rights (access, correction, erasure, portability), grievance mechanism, breach notification to the Data Protection Board without delay,
cross-border transfer disclosure (Section 16 negative-list monitoring), IT Act 2000 / IT Rules 2021, children's data requires guardian consent,
processing records, reasonable security safeguards, penalty awareness up to ₹250 Crore. Local pricing: ₹1999/month (INR).
India terms · enforcement timeline May 2027.
Universal commitments: data minimisation, purpose limitation, lawful basis for API key collection,
third-party sharing disclosed (OSM, TomTom, hosting sub-processors), analytics tracking disclosed with consent,
cross-border transfer countries listed with adequacy or SCC/consent basis, retention limits, operator/processor agreements,
automated decision-making disclosure, children's data protection, security safeguards,
data subject rights — access, correction, deletion, erasure, objection, portability, and consent withdrawal —
contact for data requests privacy@elara-cortex.com, opt-out for direct marketing,
and data breach notification procedure (72h to regulators and users where required).
Local language rights: acesso/correção/eliminação/portabilidade (pt-BR) · الوصول/التصحيح/الحذف (ar) ·
สิทธิในการเข้าถึง/แก้ไข/ลบ (th) · hak akses/koreksi/penghapusan (id) · 開示/訂正/削除/利用停止 (ja) ·
访问/更正/删除 (zh).